feat(infra): showcase the declarative bucket feature

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>

terranix/s3.nix

@@ -12,15 +12,37 @@ in
 
     resource = {
       secret_resource.admin-s3-token.lifecycle.prevent_destroy = true;
-      garage_bucket.monorepo-terraform-state = { };
+      garage_bucket = {
+        monorepo-terraform-state = { };
+        impress-raito-demo = { };
+      };
+
       garage_bucket_global_alias = {
         monorepo-terraform-state = {
           bucket_id = tf.ref "resource.garage_bucket.monorepo-terraform-state.id";
           alias = "monorepo-terraform-state";
         };
+        impress-raito-demo = {
+          bucket_id = tf.ref "resource.garage_bucket.impress-raito-demo.id";
+          alias = "impress-raito-demo";
+        };
+      };
+
+      garage_key = {
+        raito-dinum-test = {
+          name = "raito-dinum-test";
+          permissions.create_bucket = false;
+        };
+      };
+      garage_bucket_key = {
+        raito-dinum-test = {
+          bucket_id = tf.ref "resource.garage_bucket.impress-raito-demo.id";
+          access_key_id = tf.ref "resource.garage_key.raito-dinum-test.access_key_id";
+          read = true;
+          write = true;
+          owner = true;
+        };
       };
-      garage_key = { };
-      garage_bucket_key = { };
     };
 
     provider.garage = {